Global law enforcement seized more than $873 million in cryptocurrency and arrested over 6,000 suspects across three major operations in the first half of 2026, marking the most concentrated enforcement period against crypto-enabled fraud on record. Interpol's Operation First Light, disclosed Jul...
"Cryptocurrency investment fraud is currently one of the most financially devastating forms of cybercrime." — U.S. Department of Justice, Scam Center Strike Force
Global law enforcement seized more than $873 million in cryptocurrency and arrested over 6,000 suspects across three major operations in the first half of 2026, marking the most concentrated enforcement period against crypto-enabled fraud on record. Interpol's Operation First Light, disclosed July 9, netted $293 million in assets and 5,811 arrests across 97 countries. The U.S. DOJ Scam Center Strike Force has restrained over $701 million and frozen an additional $580 million in crypto linked to Southeast Asian pig-butchering syndicates. A coordinated Dubai Police-FBI operation in April dismantled nine scam compounds and arrested 276 suspects.
The enforcement surge arrives alongside Chainalysis data showing illicit cryptocurrency addresses received at least $154 billion in 2025 — a 162% year-over-year increase — with stablecoins now comprising 84% of illicit transaction volume. The FBI recorded $11.36 billion in cryptocurrency fraud losses reported by U.S. victims in 2025 alone, a 22% increase from the prior year. The scale of the problem dwarfs recovery efforts, but the operational tempo of 2026 represents a structural shift in how law enforcement engages crypto-native crime.
Interpol disclosed Operation First Light 2026 on July 9, summarizing a coordinated campaign that ran from January 15 to April 30 across 97 participating countries. The operation targeted social engineering scams — business email compromise, sextortion, romance fraud, impersonation, and investment fraud — along with the money laundering networks that process proceeds.
Final results:
| Metric | Value | |---|---| | Arrests | 5,811 | | Assets seized | $293 million | | Victims identified | 142,000+ | | Cases resolved | 23,715 | | Bank accounts frozen | 31,014 | | Additional suspects identified | 15,606 | | Interpol notices/diffusions issued | 99 |
The operation's breadth distinguishes it from prior efforts. Previous iterations of First Light focused on specific regions; the 2026 edition expanded to near-universal participation. The 142,000 identified victims represent only a fraction of the actual total, as most crypto fraud goes unreported. The FBI estimates that only 10-15% of crypto fraud victims file formal complaints.
The most technically significant finding from Operation First Light emerged from Thailand, where police arrested two suspects — including a 20-year-old — linked to a single cryptocurrency wallet that processed $122.5 million in romance scam proceeds over ten months.
The suspects employed cross-chain token swaps, converting stolen assets across multiple blockchains to create what investigators described as a tangle of unrelated-looking transactions rather than a single traceable flow. This technique exploits the fragmentation of blockchain ecosystems: funds move from Ethereum to a bridge protocol, convert to assets on Solana or Tron, then exit through a different exchange or OTC desk.
According to Elliptic research from 2025, over $21.8 billion in high-risk crypto has been laundered using cross-chain methods. Direct transfers to exchanges — the traditional off-ramp for illicit funds — dropped from 40% of illicit flows in 2021 to 15% by mid-2025, as criminals adopted increasingly sophisticated laundering infrastructure.
The Thailand case demonstrates a critical asymmetry in the crypto enforcement landscape: a single individual, operating with relatively low technical overhead, can process nine figures in illicit value. The $122.5 million handled by one wallet over ten months translates to roughly $400,000 per day in laundered proceeds.
The U.S. Department of Justice formed the Scam Center Strike Force in 2025, combining the U.S. Attorney's Office for the District of Columbia, the DOJ Criminal Division, the FBI, and the U.S. Secret Service. The unit focuses specifically on Southeast Asian cryptocurrency investment fraud targeting American victims.
As of February 2026, the Strike Force has frozen or seized more than $580 million in cryptocurrency. Under broader FBI and Secret Service coordination, more than $701.9 million in cryptocurrency tied to laundering of stolen victim funds has been restrained through voluntary actions by crypto service providers and U.S. legal process.
Separately, the FBI's Operation Level Up — a proactive victim notification program — has contacted 8,935 victims of cryptocurrency investment fraud as of March 2026. The program found that 77% of those notified were unaware they were being scammed. Estimated savings to victims who stopped sending funds after notification: $562.7 million.
These figures illustrate two distinct enforcement strategies: asset recovery (seizing funds already stolen) and loss prevention (interrupting scams in progress). The $562.7 million in estimated prevented losses suggests that intervention economics may be more efficient than post-hoc recovery.
On April 29, 2026, Dubai Police — in coordination with the FBI and Chinese authorities — raided nine fortified scam compounds and arrested 276 suspects. Three defendants were subsequently charged in the Southern District of California with federal wire fraud and money laundering: Thet Min Nyi (27, Burmese national), Wiliang Awang (23, Indonesian national), and Andreas Chandra (29, Indonesian national), among others.
The operation targeted two organizations — Sanduo Group and Giant Company — running pig-butchering schemes from Dubai-based compounds. The coordination between Dubai, U.S., and Chinese law enforcement represents an operational model that was essentially nonexistent three years ago. As of 2026, 87% of Interpol member countries report maintaining dedicated cryptocurrency crime units, up from 62% in 2022.
Chainalysis's 2026 Crypto Crime Report, covering 2025 data, found that illicit cryptocurrency addresses received at least $154 billion — a 162% year-over-year increase. This headline figure requires decomposition.
The primary driver was a 694% increase in value received by sanctioned entities. The ruble-backed A7A5 stablecoin alone processed $93.3 billion in less than a year, serving as a bridge for Russian businesses to access global markets despite sanctions. Excluding sanctions-related volume, the remaining illicit activity — scams, theft, ransomware, darknet markets — still totals tens of billions.
Key category breakdowns from the report:
The illicit share of all attributed crypto transaction volume remains below 1%, according to Chainalysis. However, this metric measures only identified illicit addresses, not total criminal activity. The actual illicit share is almost certainly higher, though the precise figure is unknown.
Stablecoins now account for 84% of all illicit transaction volume, up from roughly 50% in 2022. This mirrors the broader ecosystem trend: stablecoins are the dominant medium for all crypto activity, licit and illicit, due to lower volatility and broader acceptance.
The UN Office of the High Commissioner for Human Rights published a report in February 2026 documenting conditions inside Southeast Asian scam compounds. The findings reframe crypto fraud as a human trafficking crisis, not merely a financial crime.
Key data from the UN report:
Some facilities have been found in conflict zones, protected by private armed groups. In Eswatini, Operation First Light investigators discovered a network that had built a working replica of a Brazilian police station — complete with fake uniforms and signage — to impersonate federal police on video calls.
The estimated global annual revenue of these operations: $64 billion, according to sources cited in the UN report. The economic value chain runs from human trafficking (labor supply) through crypto-enabled fraud (revenue generation) to cross-chain laundering (value extraction). Each layer involves distinct actors, infrastructure, and jurisdictional challenges.
The aggregate numbers reveal the scale mismatch between losses and recoveries:
| Category | Amount | |---|---| | Total illicit crypto volume (2025) | $154 billion | | Crypto fraud losses reported to FBI (2025) | $11.36 billion | | Pig-butchering losses reported to FBI (2025) | $7.2 billion | | DOJ Strike Force seizures (cumulative) | $580 million+ | | DOJ broader crypto restraints | $701.9 million | | Interpol First Light seizures | $293 million | | FBI Operation Level Up prevented losses | $562.7 million |
Recovery as a percentage of reported losses remains in the low single digits. The $580 million seized by the Strike Force represents approximately 8% of the $7.2 billion in pig-butchering losses reported to the FBI in 2025 alone.
However, measuring enforcement effectiveness solely by recovery rate understates the deterrent and disruption value. The destruction of nine Dubai compounds, the arrest of 5,811 suspects across 97 countries, and the freezing of 31,014 bank accounts impose real costs on criminal operations. Whether those costs are sufficient to alter the economics of crypto fraud — where a single 20-year-old can process $122.5 million in ten months — remains an open question.
The proliferation of dedicated crypto crime units (87% of Interpol members, up from 62% in 2022) suggests that institutional capacity is building. The question is whether it can scale at the same rate as the criminal infrastructure it targets.
The first half of 2026 produced more coordinated law enforcement action against crypto-enabled fraud than any prior period. The operational scale — 97 countries, thousands of arrests, hundreds of millions seized — reflects genuine institutional maturation. Dedicated crypto crime units now exist in 87% of Interpol member states, and cross-border coordination between the FBI, Dubai Police, Thai authorities, and Chinese law enforcement has moved from theoretical to operational.
The structural challenge remains unchanged. Illicit crypto flows measured $154 billion in 2025. Enforcement recoveries measure in the hundreds of millions. The gap is three orders of magnitude. Cross-chain laundering techniques continue to outpace tracing capabilities, and the industrialization of scam operations — powered by trafficked labor and AI-enhanced social engineering — suggests that the supply side of crypto fraud is still scaling.
The economic value distribution of crypto fraud flows overwhelmingly favors criminal operators. For every dollar seized by law enforcement, an estimated $100 or more flows through unrecovered. The enforcement apparatus is building capacity, but the data does not yet support the conclusion that the tide has turned.